CVE-2025-55886

CVE-2025-55886 Descripción Se descubrió una vulnerabilidad de Referencia Directa Insegura a Objetos IDOR en ARD. La falla existe en el parámetro feuid del endpoint de la API del historial de pagos. Un atacante autenticado puede manipular este parámetro para acceder al historial de pagos de otros...

CVE-2025-55885

CVE-2025-55885 Descripción Vulnerabilidad de inyección SQL en Alpes Recherche et Developpement ARD GEC en Ligne anterior a v.2025-04-23 permite a un atacante remoto escalar privilegios a través de los parámetros GET en index.php Vectores de Ataque Inyección SQL a través del parámetro GET no...

PT-2025-38756

Name of the Vulnerable Software and Affected Versions Alpes Recherche et Developpement ARD GEC en Lign versions prior to 2025-04-23 Description A SQL Injection issue exists in Alpes Recherche et Developpement ARD GEC en Lign. A remote attacker can potentially escalate privileges by manipulating t...

ARD GEC en Ligne 安全漏洞

ARD GEC en Ligne is an online service portal of ARD France. A security vulnerability exists in ARD GEC en Ligne that stems from an Ajax transaction manager endpoint that does not properly clean or encode the accountName field, which could lead to a cross-site scripting attack...

ARD GEC en Lign 安全漏洞

ARD GEC en Ligne is an online service portal of ARD France. A security vulnerability exists in versions of ARD GEC en Lign prior to 2025-04-23, which stems from improper handling of the GET parameter in index.php, which could lead to SQL injection attacks and elevation of privilege...

CVE-2025-55885

SQL Injection vulnerability in Alpes Recherche et Developpement ARD GEC en Lign before v.2025-04-23 allows a remote attacker to escalate privileges via the GET parameters in index.php...

CVE-2025-55885: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in Alpes Recherche et Developpement ARD GEC en Lign before v.2025-04-23 allows a remote attacker to escalate privileges via the GET parameters in index.php...

CVE-2025-55885

Alpes Recherche et Developpement ARD GEC en Lign versions prior to v.2025-04-23 are vulnerable to a SQL Injection flaw in the index.php file. The root cause is the improper handling and lack of sanitization for the GET parameter ocid, specifically on the transaction confirmation page located at h...

CVE-2025-55885

SQL Injection vulnerability in Alpes Recherche et Developpement ARD GEC en Lign before v.2025-04-23 allows a remote attacker to escalate privileges via the GET parameters in index.php...